Let's encrypt with CloudFront and S3
Use this as a reference https://medium.com/@richardkall/setup-lets-encrypt-ssl-certificate-on-amazon-cloudfront-b217669987b2
Ensure in Route53 that your domain name resolves to the alias record of the CloudFront instance and then attach the cert to CloudFront.